mastodon: bump to v4.4.7, helm chart 6.5.3

rspamd: bump to 3.13.2, helm chart 0.5.8

adguard-home: bump to 0.107.67, helm chart 2.3.34

gitea: bump to 1.24.6, helm chart 12.4.0

metallb: bump to 0.15.2, helm chart 0.15.2

cert-manager: bump to 1.19.1, helm chart 1.19.1

mastodon: bump to v4.4.7, helm chart 6.5.3

inventory/ghp/sample/group_vars/all/versions.yaml

@@ -1,5 +1,5 @@
 # MetalLB balancer
-metallb_version: 0.14.9
+metallb_version: 0.15.2
 
 # NFS provisioners
 nfs_client_provisioner_hdd_version: 4.0.18
@@ -12,7 +12,7 @@ ceph_csi_rbd_version: 3.8.0
 ceph_csi_cephfs_version: 3.8.0
 
 # Cert-manager
-cert_manager_version: 1.18.2
+cert_manager_version: 1.19.1
 
 # External-DNS
 external_dns_version: 6.31.0
@@ -36,7 +36,7 @@ openldap_version: 1.2.7
 minio_version: 5.0.13
 
 # Adguard Home
-adguard_version: 2.3.33
+adguard_version: 2.3.34
 
 # Bitwarden (aka Vaultwarden)
 bitwarden_version: 2.0.40
@@ -44,7 +44,7 @@ bitwarden_version: 2.0.40
 # Gitea
 gitea_ingress_nginx_version: 4.12.1
 gitea_dns_version: 6.31.0
-gitea_version: 12.2.0
+gitea_version: 12.4.0
 
 # Gitea Act Runner
 gitea_act_runner_version: 0.1.14
@@ -53,7 +53,7 @@ gitea_act_runner_version: 0.1.14
 harbor_version: 1.12.4
 
 # Mastodon
-mastodon_version: 6.5.2
+mastodon_version: 6.5.3
 
 # Nextcloud
 nextcloud_version: 5.0.2
@@ -62,7 +62,7 @@ nextcloud_version: 5.0.2
 dovecot_version: 0.1.8
 postfix_version: 0.1.7
 roundcube_version: 0.4.6
-rspamd_version: 0.5.7
+rspamd_version: 0.5.8
 
 # Pypi server
 pypiserver_version: 2.5.0

roles/ddclient/handlers/main.yml

@@ -22,9 +22,9 @@
     detach: true
     restart_policy: unless-stopped
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
   when: ddclient_container_engine == 'docker'
 
 - name: restart podman ddclient
@@ -36,8 +36,8 @@
     state: started
     restart: yes
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
   when: ddclient_container_engine == 'podman'
 

roles/ddclient/tasks/docker.yml

@@ -31,6 +31,6 @@
     container_default_behavior: no_defaults
     restart_policy: unless-stopped
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"

roles/ddclient/tasks/podman.yml

@@ -30,9 +30,9 @@
     image: "{{ ddclient_container_registry }}/{{ ddclient_image_name }}:{{ ddclient_image_tag }}"
     state: present
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
 
 - name: Generate container systemd unit
   shell: "podman generate systemd {{ ddclient_container_name }}"